Doug Belshaw
Yesterday, I received a sales call on my personal phone for tickets for Goodwood. I asked how they got my number and, of course, it was through a data broker.
I immediately went onto the data broker's website and asked for my details to be removed, in compliance with the GDPR.
It made me think, though, that LLMs are trained on a corpus of data that may include details such as this. What happens then? How do we get our data removed?
(I'm sure @neil and other large brains have noodles on this)
Neil Brown
It's a bit of a mess.
Some people argue that retraining is a necessity, and that the principle of data protection by design and by default requires a controller to have thought about this in advance, and factored it in. But it's not clear how many have done so.
Others argue that the right to erasure or right to object do not arise in the context here, or else that, if they did, it would be down to the presentation end to filter out the personal data.
Doug Belshaw
Nemo_bis 🌈
@dajb See the #OpenAI ban in Italy.
https://gdprhub.eu/index.php?title=Garante_per_la_protezione_dei_dati_personali_(Italy)_-_9874702
Doug Belshaw
@nemobis Oh interesting:
"Putting in place a tool, which could be accessible on the controller’s website, by which data subjects who log in from Italy can exercise their right to object to the processing of their personal data obtained from third parties, when the processing is carried out for purposes of algorithm training and provision of the service."
GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.
All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.